Privacy Policy – joliok Casino

1. Who We Are

joliok Casino ("joliok", "we", "us", or "our") operates the online casino and sports betting platform accessible at joliok.app. joliok is the data controller responsible for the personal information collected through the Platform. For the purposes of this Privacy Policy, "Platform" means the joliok website, all subdomains, mobile web interfaces, and any associated services made available by joliok.

This Privacy Policy applies to all Users of the joliok Platform, including registered Account holders, prospective players browsing the site, and individuals who contact joliok support. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

joliok collects the following categories of personal data in connection with the operation of the Platform and delivery of its Services:

3. How We Collect Data

joliok collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automated technologies: Cookies, web beacons, and server logs that automatically collect technical and usage data as you navigate the Platform. See Section 7 (Cookies) for further detail.
• Third-party sources: Identity verification providers, payment processors (GCash, Maya, BPI, BDO), and fraud detection services may provide joliok with data relevant to verifying your identity or processing transactions. joliok uses this data solely for the purposes stated herein.

4. Legal Basis for Processing

joliok processes your personal data under the following legal bases, consistent with the Republic Act No. 10173, or the Data Privacy Act of 2012 of the Philippines (DPA 2012) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our contract with you — primarily the operation of your joliok Account, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws, including PAGCOR-mandated KYC obligations, Anti-Money Laundering Act (AMLA) reporting requirements, and tax regulations.
• Legitimate interest: Processing necessary for the legitimate interests of joliok, including fraud detection, platform security, responsible gaming monitoring, and general business analytics — provided those interests do not override your fundamental rights.
• Consent: Where required by law and not covered by another legal basis, joliok will seek your explicit consent before processing your data (e.g., for optional marketing communications). You may withdraw consent at any time via Account settings or by contacting support.

5. How We Use Your Data

joliok uses collected personal data for the following purposes:

• Creating and managing your joliok Account, including identity verification and ongoing KYC compliance.
• Processing deposits, withdrawals, and related financial transactions via GCash, Maya, Philippine bank channels, and other supported payment methods.
• Delivering casino games, live dealer services, sports betting, bingo, and all other Platform features you access.
• Administering bonuses, promotions, loyalty programmes, and VIP rewards in line with applicable terms.
• Monitoring gameplay for responsible gaming purposes — including detection of potentially problematic patterns and enforcement of self-set limits.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct as defined in the joliok Terms & Conditions.
• Providing customer support and responding to enquiries, complaints, and disputes.
• Sending service notifications (e.g., transaction confirmations, security alerts, account updates) via SMS or email to your registered contact details.
• Sending promotional communications where you have opted in and not subsequently opted out.
• Improving the Platform through aggregated, anonymised analytics of usage patterns and technical performance.
• Complying with applicable legal and regulatory obligations, including PAGCOR reporting requirements.

6. Data Sharing & Disclosure

joliok does not sell, rent, or trade your personal data to third parties. joliok may share your personal data with the following categories of recipients, strictly limited to the purposes described in this Policy:

• Payment service providers: GCash (Mynt/G-Xchange), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other payment processors, for the sole purpose of processing financial transactions.
• KYC and identity verification providers: Third-party services engaged to verify the identity and age of joliok Users in compliance with PAGCOR and AMLA requirements.
• Game content providers: JILI Technology, PG Soft, Pragmatic Play, and other licensed game studios may receive anonymised session identifiers to enable game functionality. These providers do not receive your personally identifiable information.
• Fraud prevention and security services: Third-party providers assisting joliok in detecting fraudulent accounts, identifying suspicious betting patterns, and maintaining Platform integrity.
• Regulatory and law enforcement authorities: joliok will disclose personal data to PAGCOR, the AMLC (Anti-Money Laundering Council), the NPC (National Privacy Commission), or other competent Philippine authorities when required by law, court order, or regulatory mandate.
• Professional advisers: Legal counsel, auditors, and accountants, bound by professional confidentiality obligations, where disclosure is necessary for joliok's legitimate business or legal interests.

7. Cookies & Tracking Technologies

The joliok Platform uses cookies and similar tracking technologies to deliver core functionality, improve user experience, and support security and analytics. The following categories of cookies are used:

• Strictly necessary cookies: Essential for Platform operation — session management, login state persistence, security tokens. Cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as display settings, preferred language, and recently played games to personalise your joliok experience.
• Analytics cookies: Aggregate, anonymised data about how Users navigate the Platform. Used to improve performance, identify technical issues, and understand which features are most valued. joliok does not use third-party advertising networks or cross-site tracking cookies.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the joliok Platform. Disabling functional or analytics cookies will not prevent access to games or account features.

8. Data Retention

joliok retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for a minimum period required by applicable law. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, in compliance with AMLA retention requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming history: Retained for a minimum of 3 years from the date of each game session.
• Support communications: Retained for 2 years following resolution of the relevant enquiry or dispute.
• Technical and log data: Retained for up to 12 months for security and fraud detection purposes.

Upon expiry of the applicable retention period, joliok will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original data.

9. Data Security

joliok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the joliok Platform.
• Encryption at rest for stored personal and financial data.
• Access controls: Personal data access is restricted to joliok personnel with a documented need-to-know, enforced through role-based access management.
• Two-factor authentication (2FA) available for all User Accounts to prevent unauthorised login.
• Continuous monitoring for anomalous access patterns, suspicious transactions, and potential security incidents.
• Regular penetration testing and security assessments of Platform infrastructure.

Despite these measures, no online transmission of data is completely risk-free. joliok cannot guarantee absolute security and encourages all Users to enable 2FA on their Account and to use strong, unique passwords.

10. Your Data Subject Rights

Under the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines, you have the following rights with respect to your personal data held by joliok:

• Right to be informed: The right to know what personal data joliok holds about you and the purposes for which it is processed — as detailed in this Policy.
• Right of access: The right to request a copy of the personal data joliok holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most Account information directly through Account settings.
• Right to erasure: The right to request deletion of your personal data where joliok no longer has a legal basis for retaining it, subject to applicable legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: The right to object to processing based on legitimate interest, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the joliok Data Protection Officer via in-platform live chat or at the email address specified in Section 14. joliok will respond to verified requests within 30 calendar days.

11. Children & Minors

The joliok Platform is strictly intended for individuals aged 21 years and older in accordance with applicable Philippine law and PAGCOR regulations. joliok does not knowingly collect personal data from individuals under the age of 21.

If joliok discovers or is notified that an Account has been created by or on behalf of a person under 21 years of age, the Account will be immediately suspended, the personal data will be deleted in accordance with applicable law, and any funds on account will be handled per joliok's applicable compliance procedures.

If you have reason to believe that joliok holds personal data of a minor, please contact us immediately at the details provided in Section 14.

12. Cross-Border Data Transfers

Some of joliok's third-party service providers — including game content providers and technical infrastructure suppliers — may be located outside the Philippines. Where personal data is transferred internationally, joliok ensures that such transfers are subject to appropriate safeguards consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines, including data processing agreements that impose data protection standards equivalent to those applied within the Philippines.

joliok will not transfer your personal data to jurisdictions that do not provide adequate data protection without first implementing the contractual protections described above.

13. Changes to This Privacy Policy

joliok may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, joliok will notify registered Users via email or in-platform notification at least 7 days before the amended Policy takes effect.

The current version of this Privacy Policy is always available at joliok.app/privacy-policy. The effective date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or joliok's data practices, you may contact the joliok Data Protection Officer (DPO) through the following channels:

• In-Platform Live Chat: Available 24/7. Fastest response time — typically under 5 minutes.
• Email: [email protected] (plain text — not a clickable link). Please mark your email subject with "Privacy Request" or "DPO Enquiry" for prompt routing.

joliok's support team includes dedicated compliance staff who handle privacy requests. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. Contact details for the NPC are available on the official NPC website.